Which security concept includes the policy, process, and internal controls comprising how an organization is run – including the structures and policies of the leadership and other mechanisms for management?

What should every cloud customer set up with its cloud service provider (CSP) that can be utilized in the event of an incident?

All cloud services utilize virtualization technologies. 

Which of the following best describes the primary purpose of cloud security frameworks?

APIs and web services require extensive hardening and must assume attacks from authenticated and unauthenticated adversaries.